Because there are so many certificate authorities, any certificate authority can issue a certificate for any website. Could governments compel certificate authorities to issue them an SSL certificate for a site they want to impersonate? If so, how might ISIS accomplish this? As you make your initial posting, please provide a thoughtful argument that includes an example of some sort supported by peer reviewed research.